CVE-2024-6254

Summary

CVE-2024-6254 is a vulnerability affecting the Brizy – Page Builder plugin for WordPress. The issue lies in the lack of adequate nonce validation, allowing for Cross-Site Request Forgery attacks. Malicious actors can manipulate form submissions as another user, potentially leading to Stored Cross-Site Scripting if unfiltered_html is enabled. This flaw impacts all versions up to and including 2.5.1. Unauthenticated attackers can trick site administrators into performing harmful actions by creating specially crafted links.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.